Privacy Policy

1. Information We Collect

When you use webfacelift, we collect the following information:

• Account information: Your name, email address, and profile picture provided through Google OAuth when you sign in.
• Website URLs: The URLs you submit for reconstruction, along with the scraped content (text, images, structure) from those sites.
• Project data: Blueprints, chat messages, uploaded media, and other content you create within the platform.
• Payment information: Payment details are processed directly by Stripe. We do not store your credit card numbers.
• Usage data: Pages visited, features used, and interactions with the platform for analytics purposes.

2. How We Use Your Information

• To provide and improve the website reconstruction service
• To process payments and manage your credit balance
• To enable project sharing and collaboration features
• To communicate with you about your account and service updates
• To analyze usage patterns and improve the platform

3. Third-Party Services

We use the following third-party services to operate webfacelift. Each service processes certain data as described:

• Anthropic (Claude): Website content is sent to Claude for analysis and blueprint generation. Subject to Anthropic's Privacy Policy.
• Google (Gemini): Website content is processed by Gemini for design consultation. Subject to Google's Privacy Policy.
• Firecrawl: Used to scrape website content from URLs you provide. Subject to Firecrawl's Privacy Policy.
• Supabase: Handles authentication, database storage, and file storage. Subject to Supabase's Privacy Policy.
• Stripe: Processes all payments securely. Subject to Stripe's Privacy Policy.
• Google Analytics: Collects anonymized usage data to help us improve the platform. Subject to Google's Privacy Policy.

4. Data Retention

Your project data is retained as long as your account is active. If you delete a project, its data is permanently removed from our systems. If you delete your account, all associated data is deleted within 30 days. Scraped website content used during generation is not stored beyond the generation process unless saved as part of a project.

5. Data Security

We implement industry-standard security measures including encrypted connections (HTTPS/TLS), secure authentication via OAuth 2.0, and PCI-compliant payment processing through Stripe. Your data is stored in Supabase's infrastructure with row-level security policies.

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data and account
• Export your project data (via the JSON tab in the workspace)
• Withdraw consent for data processing at any time

To exercise any of these rights, contact us at [email protected].

7. Cookies

We use essential cookies for authentication and session management. We also use Google Analytics, which sets cookies to collect anonymized usage data. No advertising or tracking cookies are used beyond analytics.

8. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by posting the update on this page with a revised date.

9. Contact

If you have questions about this privacy policy, contact us at [email protected].